---
updatedAt: 2026-05-12T10:01:11.000Z
---

# Retrieve collection of policies

This operation returns an object containing information about all of the policies associated with the specified client.

# OpenAPI definition

```json
{
  "openapi": "3.0.0",
  "x-explorer-enabled": false,
  "info": {
    "title": "VulnPolicy API (Legacy)",
    "license": {
      "name": "(c) Copyright 2020 WhiteHat Security"
    },
    "version": "1.0.0"
  },
  "servers": [
    {
      "url": "https://sentinel.whitehatsec.com"
    }
  ],
  "paths": {
    "/api/{client_id}/vuln_policy": {
      "get": {
        "tags": [
          "VulnPolicy API v1.0"
        ],
        "summary": "Retrieve collection of policies",
        "description": "This operation returns an object containing information about all of the policies associated with the specified client.",
        "operationId": "getCollectionOfPolicies",
        "parameters": [
          {
            "name": "client_id",
            "in": "path",
            "description": "Enter a specific client ID, or use 0 to fetch global policies associated with all clients.",
            "required": true,
            "style": "simple",
            "schema": {
              "type": "integer",
              "format": "int32"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Provides information about all the policies associated with the given Client ID.",
            "headers": {},
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/VulnPolicyCollection"
                }
              }
            }
          },
          "400": {
            "description": "BadRequestResponse indicates a request with invalid parameters.",
            "content": {}
          },
          "401": {
            "description": "UnauthorizedResponse signals an unauthorized API access.",
            "content": {}
          },
          "403": {
            "description": "ForbiddenResponse signals a request for a resource that does not exist or is not authorized.",
            "content": {}
          },
          "500": {
            "description": "GenericError generic error.",
            "content": {}
          }
        },
        "deprecated": false
      }
    }
  },
  "components": {
    "schemas": {
      "VulnPolicyEnabledVulnClasses": {
        "properties": {
          "id": {
            "type": "number"
          },
          "name": {
            "type": "string"
          }
        }
      },
      "VulnPolicy": {
        "properties": {
          "name": {
            "type": "string"
          },
          "creator": {
            "type": "string",
            "nullable": true
          },
          "created_time": {
            "type": "number",
            "nullable": true
          },
          "enabled_vuln_classes": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/VulnPolicyEnabledVulnClasses"
            }
          },
          "modified_time": {
            "type": "number",
            "nullable": true
          },
          "id": {
            "type": "string"
          },
          "auto_vote": {
            "type": "number"
          },
          "href": {
            "type": "string"
          },
          "modifier": {
            "type": "string",
            "nullable": true
          }
        }
      },
      "VulnPolicyCollection": {
        "properties": {
          "vuln_policies": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/VulnPolicy"
            }
          },
          "href": {
            "type": "string"
          },
          "stats": {
            "properties": {
              "total_count": {
                "type": "number"
              }
            },
            "type": "object"
          }
        }
      }
    }
  },
  "x-readme": {
    "proxy-enabled": true
  }
}
```